Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
File:                     d6U9LpdwTb6oMaZEAHKQTukacbA.mft (raw, json)
Hash identifier:          YQKKkLC3kPGJ3zk5zWokqaOr4C+km3dhPNtKwP9T4WA=
Subject key identifier:   51:73:FE:35:80:FD:28:3E:FB:48:CC:8D:1B:3A:58:30:73:69:92:A9
Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
Certificate issuer:       /CN=77a53d2e97704dbea831a6440072904ee91a71b0
Certificate serial:       019359C14894CB777AE46E3FD5D98146D741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
Manifest number:          104F
Signing time:             Sat 23 Nov 2024 16:00:59 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:59 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:59 +0000
Files and hashes:         1: Xmrp2OhncDdKDehYvqqbEb4ey9w.roa (hash: U7440FpyFfNE5sWCCqrLfXk3Ys5BCi/KTDEmq3rL+yQ=)
                          2: d6U9LpdwTb6oMaZEAHKQTukacbA.crl (hash: kG/fyCzCDQMt354/yRbIUQgtx/GeWNDSHK9p1m+NxIc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c1:48:94:cb:77:7a:e4:6e:3f:d5:d9:81:46:d7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0
        Validity
            Not Before: Nov 23 16:00:59 2024 GMT
            Not After : Nov 24 16:00:59 2024 GMT
        Subject: CN=5173fe3580fd283efb48cc8d1b3a5830736992a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:57:50:1d:02:6e:2b:40:31:59:a5:2b:60:
                    b7:38:54:04:21:67:49:3b:5f:36:3b:de:fe:eb:f6:
                    45:a6:22:3e:19:ea:9b:fc:d8:9f:87:49:66:13:c3:
                    a7:a6:97:91:a6:fd:f6:6f:43:b5:12:92:b7:cc:f4:
                    8e:3a:e1:c9:e9:d9:64:d8:c0:13:5b:86:0b:3d:10:
                    b0:9e:91:c3:00:94:ce:2c:49:64:69:7c:bc:7a:6a:
                    07:dc:aa:e8:b3:71:88:dc:91:49:0a:15:a1:56:cc:
                    ce:eb:f4:59:b4:39:39:7b:e7:23:42:97:3d:c9:b1:
                    63:c2:e1:10:fd:cc:e8:ac:14:11:f6:b2:ad:a9:eb:
                    9c:78:76:a0:40:a3:46:29:04:f6:8b:dd:8d:01:e1:
                    61:6b:1c:1c:c4:37:5d:09:f3:ba:9f:e4:31:f3:6a:
                    99:9c:a9:1d:85:6a:b1:68:31:09:ac:03:12:e5:32:
                    59:b1:6d:fd:85:e1:0f:fd:17:de:71:e0:82:4f:9d:
                    c9:f3:87:e2:a6:5f:70:4f:dd:8c:5b:dd:68:5f:22:
                    a7:4f:87:0c:cb:8f:3f:99:d9:cd:a2:e8:07:c0:00:
                    35:40:f9:85:3f:55:42:0b:e1:fd:dd:2d:9c:08:da:
                    41:54:7c:21:9d:d2:68:2d:d0:af:73:86:ab:b7:8c:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:73:FE:35:80:FD:28:3E:FB:48:CC:8D:1B:3A:58:30:73:69:92:A9
            X509v3 Authority Key Identifier:
                keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5b:04:94:11:45:c9:27:42:c0:f5:72:3d:69:11:2b:9b:b1:
         3f:82:83:d7:09:d3:08:4e:54:c4:68:f6:52:3c:ab:26:67:bd:
         0d:df:24:69:9e:03:b7:60:38:5b:43:d9:93:57:4b:ff:74:63:
         85:0a:32:6c:75:1b:68:5d:df:38:f6:4b:5d:fc:fc:b4:96:3e:
         d4:2c:d8:fd:d5:62:e1:74:58:6c:6d:ac:39:f1:04:95:9a:eb:
         f1:0c:3d:bd:15:f8:0b:b1:73:6c:9d:45:75:a9:0c:2e:f8:c8:
         dd:88:2c:b0:18:51:96:e8:c6:21:14:4b:eb:02:54:91:a9:4b:
         64:cf:0f:5b:a1:1b:dc:6c:44:b3:ce:20:5a:16:02:8e:e9:cc:
         d0:ea:91:75:ff:43:4c:37:4a:ab:1b:7d:6b:1e:d9:58:cd:c0:
         9f:57:d3:74:bb:59:9b:a7:09:37:f5:e0:b9:e3:b2:ea:6b:6b:
         5f:a9:95:cf:29:d2:fb:fd:a1:d6:ef:0a:64:44:4c:69:1d:5e:
         92:16:2d:3b:3a:04:8b:fd:9e:34:70:4e:52:da:97:0a:65:93:
         ed:7e:78:fc:3a:f5:4b:5a:40:bc:36:08:61:4d:51:2d:34:f8:
         58:13:54:d2:15:15:d5:b0:de:e2:59:fc:b5:13:d3:f8:2a:74:
         fe:13:10:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZwUiUy3d65G4/1dmBRtdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YTUzZDJlOTc3MDRkYmVhODMxYTY0NDAwNzI5MDRlZTkx
YTcxYjAwHhcNMjQxMTIzMTYwMDU5WhcNMjQxMTI0MTYwMDU5WjAzMTEwLwYDVQQD
Eyg1MTczZmUzNTgwZmQyODNlZmI0OGNjOGQxYjNhNTgzMDczNjk5MmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5BXUB0CbitAMVmlK2C3OFQEIWdJ
O182O97+6/ZFpiI+Geqb/Nifh0lmE8OnppeRpv32b0O1EpK3zPSOOuHJ6dlk2MAT
W4YLPRCwnpHDAJTOLElkaXy8emoH3Kros3GI3JFJChWhVszO6/RZtDk5e+cjQpc9
ybFjwuEQ/czorBQR9rKtqeuceHagQKNGKQT2i92NAeFhaxwcxDddCfO6n+Qx82qZ
nKkdhWqxaDEJrAMS5TJZsW39heEP/RfeceCCT53J84fipl9wT92MW91oXyKnT4cM
y48/mdnNougHwAA1QPmFP1VCC+H93S2cCNpBVHwhndJoLdCvc4art4zfgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFz/jWA/Sg++0jMjRs6WDBzaZKpMB8GA1UdIwQY
MBaAFHelPS6XcE2+qDGmRABykE7pGnGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZVOUxwZHdUYjZvTWFaRUFIS1FUdWthY2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMzQ5NzEtYjRkYS00YmE0LThkNmUt
ZDNjOGE0OGY3YTMyLzEvZDZVOUxwZHdUYjZvTWFaRUFIS1FUdWthY2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8wMzQ5NzEtYjRkYS00YmE0LThkNmUtZDNjOGE0OGY3YTMy
LzEvZDZVOUxwZHdUYjZvTWFaRUFIS1FUdWthY2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlsElBFF
ySdCwPVyPWkRK5uxP4KD1wnTCE5UxGj2UjyrJme9Dd8kaZ4Dt2A4W0PZk1dL/3Rj
hQoybHUbaF3fOPZLXfz8tJY+1CzY/dVi4XRYbG2sOfEElZrr8Qw9vRX4C7FzbJ1F
dakMLvjI3YgssBhRlujGIRRL6wJUkalLZM8PW6Eb3GxEs84gWhYCjunM0OqRdf9D
TDdKqxt9ax7ZWM3An1fTdLtZm6cJN/XgueOy6mtrX6mVzynS+/2h1u8KZERMaR1e
khYtOzoEi/2eNHBOUtqXCmWT7X54/Dr1S1pAvDYIYU1RLTT4WBNU0hUV1bDe4ln8
tRPT+Cp0/hMQgQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:04:12 2024 by rpki-client on console-fra.rpki-client.org